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In the Specification: 

Please delete the paragraph beginning on line 17 of page 9, 
which reads as: 

"Figure 1A is a schematic diagram of a smart card." 

Please replace the third paragraph at page 4 with the following 
amended paragraph: 

According to one aspect of the present invention there is 
provided a method of authenticating a user according to a 
biometric[s] parameter of the user presented at an 
authentication device on a user-presented device on which is 
stored a biometric[s] identification template divided into a 
secure portion and an open portion, the method comprising: 
transmitting to a client terminal data derived from said user 
biometric[s] parameter at the authentication device; 
transmitting to the client terminal only the open portion of the 
said biometricfs] identification template held on the user- 
presented device; at the client terminal, implementing a first 
stage of an identity authentication process between said data 
and said portion and transmitting the results of said 
authentication process to the user-presented device; and at the 
user-presented device implementing a second stage to complete 
the identity authentication process using said results and 
issuing an authentication result based thereon. 

Please replace the last paragraph at page 4 with the following 
amended paragraph: 

Another aspect of the invention provides a system for 
authenticating a user according to a biometricfs] parameter of 
the user, the system comprising: a user-presented device on 
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which is stored a biometric [ s ] identification template divided 
into a secure portion and an open portion, wherein only said 
open portion can be transmitted out of the said device; an 
authentication device operable to read biometric[s] data derived 
from a user, and comprising means for communicating with the 
user-presented device and a client terminal; a client terminal 
arranged to receive the said open portion of the biometric[s] 
identification template held on the user-presented device and 
the biometric[s] data derived from the user, and comprising a 
client processor operable to implement a first stage of and 
identity authentication process between said data and said 
portion and to transmit the results of said identity 
authentication process to the user-presented device, and wherein 
the user-presented device comprises a device processor operable 
to implement a second stage to complete the identity 
authentication process using said results and to issue an 
authentication result based thereon. 

Please replace the last paragraph at page 5 with the following 
amended paragraph: 

A further aspect of the invention provides a method of 
registration of a user according to a biometric[s] parameter of 
the user presented at an authentication device, the method 
comprising: transmitting to an authorized client terminal data 
derived from said user biometric[s] parameter obtained at the 
authentication device; at the authorized client terminal, 
dividing the biometric [ s ] identification template computed into 
secure portion and open portion, transmitting from the 
authorized client terminal to a user-presented device both the 
open portion and the secure portion of a biometric[s] 
identification template, storing the said template consisting of 
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open and secure portions on the user-presented device, with the 
secure portion only accessible within the user-presented device 
and not externally. 

Please replace the second paragraph at page 6 with the following 
amended paragraph: 

The particular biometric [ s ] parameter discussed herein is a 
fingerprint, but it will be appreciated that the invention can 
be applied to any suitable biometricfs] parameter. In addition, 
the particular user-presented device discussed herein is a smart 
card, but it will be appreciated that the invention can be 
applied to any general portable secure computing and data 
storage platform. 
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